$ rpki-client -vvf repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft File: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft (raw, json) Hash identifier: MC8B0WdQIHoRrXN+wcmDn7HtOahpMJwfqXheUN+/uM8= Subject key identifier: 50:2F:A2:23:0D:0A:22:60:7A:DB:DA:5A:18:A5:C7:A2:8F:E5:24:A0 Authority key identifier: 70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 Certificate issuer: /CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Certificate serial: 7FA45F49A885E059BBFDADCC9BF29586C26E47BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft Manifest number: 98 Signing time: Sat 28 Feb 2026 19:42:09 +0000 Manifest this update: Sat 28 Feb 2026 19:37:09 +0000 Manifest next update: Wed 04 Mar 2026 07:35:09 +0000 Files and hashes: 1: 7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl (hash: jS1p1a7n5/HYb6w9GWQK3tydnQE9+xTWqg81zOQgZzk=) 2: 3130332e31372e37362e302f32332d3233203d3e20313331373831.roa (hash: VidmqV5KOOIREROYSPySP7eHkVc3r+Gz/C3O6lmsJ00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a4:5f:49:a8:85:e0:59:bb:fd:ad:cc:9b:f2:95:86:c2:6e:47:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7033B8C0DC6A80E5CC4686B93BA393AFCE571B42 Validity Not Before: Feb 28 19:37:09 2026 GMT Not After : Mar 4 07:35:09 2026 GMT Subject: CN=502FA2230D0A22607ADBDA5A18A5C7A28FE524A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:43:05:30:9f:ee:1a:11:04:4c:19:70:f7:7e: 2b:42:aa:b6:56:1c:28:c9:e9:fb:51:c2:e0:4c:85: bc:cd:21:34:10:6d:68:d7:b6:1d:99:48:0d:d5:84: 7d:53:55:96:84:ed:4b:a1:ad:46:71:3f:e3:d4:bb: 8f:42:c0:db:54:6d:38:92:c8:64:04:e0:85:d0:c9: 0f:ee:01:82:b1:0f:d4:ab:8a:d3:5f:d6:2f:52:02: 5a:33:18:27:b8:d4:ef:22:a0:b4:33:bf:84:73:fa: 08:e3:f1:4b:5f:75:a7:3c:e4:82:13:2b:47:c1:ff: e8:22:2a:dc:f1:58:09:59:24:e2:36:58:7d:a3:e8: 3c:fa:cf:6a:33:e1:7c:c2:d6:5c:f6:f5:ac:f8:93: b0:2a:1f:7d:5a:35:e8:3b:2a:1f:0c:64:cf:31:8e: e0:35:b1:7d:84:32:d2:48:63:4d:95:5d:38:20:cf: 36:7a:03:f6:bc:e0:56:ed:b0:ab:b1:18:53:57:73: 39:73:0d:66:d3:fd:19:e5:29:ff:4b:3c:28:c1:ba: 63:85:55:ab:e4:6d:a1:d8:c9:34:b7:02:7d:5d:44: cd:37:ab:7f:b0:2a:49:fb:79:ae:53:6c:a2:36:8c: 64:cd:77:d1:78:f3:74:44:5c:45:b4:3e:3f:50:3e: d6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2F:A2:23:0D:0A:22:60:7A:DB:DA:5A:18:A5:C7:A2:8F:E5:24:A0 X509v3 Authority Key Identifier: keyid:70:33:B8:C0:DC:6A:80:E5:CC:46:86:B9:3B:A3:93:AF:CE:57:1B:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a062111d-0a13-4407-af33-34c22a9d7aec/0/7033B8C0DC6A80E5CC4686B93BA393AFCE571B42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:97:d7:ac:af:9b:c7:bb:9d:1b:96:f8:bf:b6:b8:7f:52:5f: 59:6d:03:e7:a7:5d:64:5b:43:bd:22:7e:23:3b:fd:09:bd:68: bd:f5:35:72:aa:55:a4:b6:c7:61:6b:52:fd:65:b0:9a:61:13: 4b:a9:c3:f7:91:ea:06:06:ee:f2:d2:7b:85:05:be:2b:1f:c8: 0d:c2:6a:70:e6:49:5c:48:6e:24:10:d6:ad:44:87:d4:97:15: b5:3c:4a:49:94:e6:b4:34:8a:1c:78:11:b8:e1:50:d3:0c:4e: 33:8f:f3:44:44:0a:70:3e:8d:07:3b:0a:45:c2:66:1b:b3:c4: 81:aa:b3:f3:ff:c0:d4:d5:7a:51:6d:51:af:c7:61:b8:54:2b: 5f:48:c3:26:ab:44:7d:1b:41:2f:ab:6e:66:11:ee:58:a0:8c: b2:c7:b6:fc:6e:1b:e4:2b:d6:de:41:32:42:d2:b1:ca:2f:a7: 7c:06:25:4b:2b:18:13:20:a0:ba:9e:cb:b5:a4:c5:2d:de:2c: 14:a1:0f:5e:46:b6:1f:57:53:0e:e1:19:9e:9f:c0:8a:42:b5: 46:ba:c9:c2:86:ce:8b:42:8a:bc:dc:3a:18:8e:79:62:5b:dc: 67:a9:9a:e5:96:8f:dd:51:e3:e3:71:8e:4e:a7:56:dd:63:08: a4:e4:53:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf6RfSaiF4Fm7/a3Mm/KVhsJuR7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZD RTU3MUI0MjAeFw0yNjAyMjgxOTM3MDlaFw0yNjAzMDQwNzM1MDlaMDMxMTAvBgNV BAMTKDUwMkZBMjIzMEQwQTIyNjA3QURCREE1QTE4QTVDN0EyOEZFNTI0QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmQwUwn+4aEQRMGXD3fitCqrZW HCjJ6ftRwuBMhbzNITQQbWjXth2ZSA3VhH1TVZaE7UuhrUZxP+PUu49CwNtUbTiS yGQE4IXQyQ/uAYKxD9SritNf1i9SAlozGCe41O8ioLQzv4Rz+gjj8Utfdac85IIT K0fB/+giKtzxWAlZJOI2WH2j6Dz6z2oz4XzC1lz29az4k7AqH31aNeg7Kh8MZM8x juA1sX2EMtJIY02VXTggzzZ6A/a84FbtsKuxGFNXczlzDWbT/RnlKf9LPCjBumOF VavkbaHYyTS3An1dRM03q3+wKkn7ea5TbKI2jGTNd9F483REXEW0Pj9QPtaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUC+iIw0KImB629paGKXHoo/lJKAwHwYDVR0j BBgwFoAUcDO4wNxqgOXMRoa5O6OTr85XG0IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MDYyMTExZC0wYTEzLTQ0MDctYWYzMy0zNGMyMmE5ZDdhZWMvMC83MDMzQjhDMERD NkE4MEU1Q0M0Njg2QjkzQkEzOTNBRkNFNTcxQjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkzQUZDRTU3 MUI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTA2MjExMWQtMGExMy00NDA3LWFm MzMtMzRjMjJhOWQ3YWVjLzAvNzAzM0I4QzBEQzZBODBFNUNDNDY4NkI5M0JBMzkz QUZDRTU3MUI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCX16yvm8e7nRuW+L+2uH9SX1ltA+enXWRb Q70ifiM7/Qm9aL31NXKqVaS2x2FrUv1lsJphE0upw/eR6gYG7vLSe4UFvisfyA3C anDmSVxIbiQQ1q1Eh9SXFbU8SkmU5rQ0ihx4EbjhUNMMTjOP80RECnA+jQc7CkXC ZhuzxIGqs/P/wNTVelFtUa/HYbhUK19IwyarRH0bQS+rbmYR7ligjLLHtvxuG+Qr 1t5BMkLSscovp3wGJUsrGBMgoLqey7WkxS3eLBShD15Gth9XUw7hGZ6fwIpCtUa6 ycKGzotCirzcOhiOeWJb3GepmuWWj91R4+Nxjk6nVt1jCKTkUzA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:24:00 2026 by rpki-client